CVE-2023-6554

When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to download protected information like exam answers...

Design/Logic Flaw

When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to download protected information like exam answers...

CVE-2023-6554 Missing authorisation in TCExam

When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to download protected information like exam answers...

Tecnick TCExam Security Breach

Tecnick TCExam is a Web-based open source e-exam system from Tecnick UK. The system is mainly used for online exams, etc. A security vulnerability exists in Tecnick TCExam versions prior to 15.1.0, which stems from an insufficiently protected external authorization mechanism in the admin folder...

The vulnerability of the getModBusPassword method in the software for controlling power supply sources of Voltronic Power ViewPower allows a intruder to gain unauthorized access to protected information.

The vulnerability of the “getModBusPassword” method in the software for controlling power supply sources of Voltronic Power ViewPower Pro is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acce...

The vulnerability of the Go programming language’s net/http package, which allows attackers to exploit and disclose protected information

The vulnerability of the net/http package in the Go programming language is related to the exposure of sensitive information. Exploiting this vulnerability allows an attacker, operating remotely, to disclose protected information...

PT-2024-1016 · Microsoft · Windows Message Queuing Client +1

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing Client MSMQC affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Message Queuing Client MSMQC, which can allow a remote attacker to gain...

The vulnerability of the DHCP server service in the Windows operating system allows a perpetrator to disclose protected information.

The vulnerability of the DHCP server service in Windows operating systems is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of Mozilla Firefox browser tabs’ headers, which allows a hacker to disclose protected information

The vulnerability in the browser tabs headers of Mozilla Firefox relates to the disclosure of information through registration files. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

The vulnerability of the web server of the microprogramming software for the universal input/output controller ioLogik, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the web-server of the microprogramming software for universal input/output controller ioLogik is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected...

The vulnerability of the ShutdownObserver() function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ShutdownObserver function in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to dependencies on behaviors that are undefined for each implementation type. Exploiting this vulnerability could allow a malicious actor to compromise...

The vulnerability of the `perf_event_validate_size()` function in the kernel/events/core.c module of the perf subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, thereby enhancing their privileges within the system.

The vulnerability of the perfeventvalidatesize function in the kernel/events/core.c module of the Linux operating system’s perf subsystem is related to writing beyond the boundaries of a allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability in the Dapr Dashboard’s web interface relates to the lack of authentication for critical functions, allowing attackers to influence the confidentiality of protected information.

The vulnerability in the Dapr Dashboard’s web interface is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality of the protected information...

The vulnerability of the TCC component in the macOS operating system allows a hacker to gain access to protected information.

The vulnerability of the TCC component in the macOS operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the Welcart eCommerce plugin for the WordPress content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Welcart eCommerce plugin for the WordPress content management system is related to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker who operates remotely to gain unauthorized access to protected...

The vulnerability in the config.inc.php script of the Nagios XI monitoring tool allows a hacker to gain unauthorized access to protected information.

The vulnerability of the config.inc.php script used in Nagios XI monitoring involves unencrypted storage of user credentials. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of Microsoft Word text editors, which allows attackers to disclose protected information

The vulnerability of Microsoft Word relates to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Inbound/Outbound Transfer function in the Nagios XI monitoring tool allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Inbound/Outbound Transfer function in Nagios XI relates to the unencrypted storage of critical information in the xioptions database table. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to disclose protected information.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the structure of web pages, allows attackers to disclose protected information.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...